Privacy policy
As provided for by the current legislation (Article 13 Regulation (EU) 2016/679, hereinafter also GDPR), Rexilience S.r.l., in the person of the legal representative pro tempore, provides Users with information regarding the processing of their data.
1.1 Data controller
The Data Controller is Rexilience S.r.l., VAT No. IT12011490963, with registered office in Corso Venezia, 54 – 20121, Milan, Italy (hereinafter the “Data Controller” or “Rexilience”).
To receive information regarding the treatment you can write to: privacy@rexilience.eu.
1.2 Scope of application
This Privacy Policy applies to the processing, carried out by Rexilience, of the personal data shared by the user, through the Site and through the fill-in form, to take advantage of or request information about the services offered by it.
1.3 Categories of data processed
The data processed are browsing data, identification and contact data provided by the User when filling out the form as well as additional data provided subsequently by the User.
Navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected in order to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow Users to be identified.
This category of data includes the IP addresses or domain names of the computers used by Users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User’s operating system and computer environment.
Data voluntarily provided by the user
This category includes all personal data optionally provided by the User. In particular, the identification and contact data provided by the User when filling out the form, as well as any additional data provided by him, even afterwards, are processed.
Information captured through cookies and other tracking systems
The site uses technical cookies, which are session (non-persistent) cookies necessary for safe and efficient navigation of the sites.
1.4 Purpose and legal basis for processing
Personal data collected are processed for the following purposes and legal bases:
(a) To take pre-contractual measures or execute a contract at the request of the User (Art. 6(1)(b) GDPR)
Personal data provided by the User in an optional manner are used only to process requests made by the User.
(b) Consent of the data subject (Art. 6(1)(a) GDPR)
If expressly consented to, the identification and contact data may be processed for sending advertising or direct sales material or for carrying out market research or commercial communication of the activity and services offered by the Owner through traditional means, such as telephone contact with operator, as well as automatic means, such as e-mail (including through newsletters) or sms.
It should be noted that any consent given for the sending of commercial and promotional communications, on the basis of Article 130, paragraphs 1 and 2, of Legislative Decree 196/2003 (“Privacy Code”), implies the receipt of such communications not only through automated means of contact (sms, email and other messages), but also through traditional means (such as paper mail or operator calls).
Consent may be revoked, even separately for different purposes, at any time, without prejudice, however, to the lawfulness of the processing carried out before said revocation.
(c) Legitimate interest of the Owner (Art. 6(1)(f) of the GDPR)
Browsing data is acquired to enable proper navigation on the website, for security purposes and to check its proper functioning, and could be used for liability assessment in case of any computer crimes against the website.
The data provided by the User may be used against the legitimate interest of the owner to carry out defensive activities or assert or defend a right in court.
Finally, the data provided by the User may be used, in aggregate form, for scientific research purposes for the sole purpose of improving the service.
1.5 Nature of data provision and consequences in case of refusal
The provision of data for the purposes indicated in this Privacy Policy is not mandatory. However, failure to provide such data, even partially, will not allow the User to take advantage of the services offered and to establish any contractual relationships.
It should also be noted that failure to provide or revocation of consent for the analysis of interests and/or the performance of commercial and promotional activities will not allow us to update the User on news, offers or initiatives promoted by Rexilience.
1.6 Mode of data processing, period and place of storage
Users’ data are processed, through the computer systems and programs used by Rexilience, within the limits of what is strictly necessary to achieve the indicated purposes and, in any case, so as to minimize the processing of identification and contact data.
Adequate security measures are taken to prevent data loss, illicit or incorrect use and unauthorized access.
Data are stored in electronic files located at the Data Controller’s headquarters and at servers controlled by the Data Controller and in any case located in the European Economic Area.
The personal data provided by Users will be kept for the entire duration of the contractual relationship and, after the termination of the same, only for the time necessary to ensure the fulfillment of all legal obligations.
The navigation data of the Users are acquired and stored for 18 (eighteen) months and in any case according to legal obligations.
The data acquired with the consent of the User and processed for the purpose of sending the newsletter and/or commercial communications will be retained for 24 months and in any case until the aforementioned consent is revoked.
Once the retention period has expired, the personal data will be destroyed, deleted or anonymized, consistent with the technical procedures of deletion and backup, subject to any defensive needs for which the data may be retained beyond the periods indicated.
1.7 Data recipients
The data will also be processed by the Owner through authorized personnel.
The data will be known by the companies that the Data Controller uses for the provision of hosting services and management of electronic mail connected to the website, companies that provide assistance and maintenance of the computer systems used, consultants for the management of litigation and legal assistance in the event of any disputes for which their involvement is necessary. The data may also become known to the competent Authorities in case of specific requests that the owner is required by law to follow up.
It should be noted that some of the subjects indicated operate as Data Processors, pursuant to Art. 28 GDPR, while others as autonomous data controllers. In the latter case, the communication of data is made because (i) prescribed by legal obligations, (ii) necessary to give effect to obligations arising from a contractual relationship or (iii) responding to the legitimate interest of the owner to maintain the security of information systems and to carry out defensive activities through legal advisors.
In any case, communication is limited to the categories of data whose transmission is necessary to achieve the stated purposes.
The data subject may request from the Data Controller the list of external subjects who carry out their activities as Data Processors.
1.8 Rights of data subjects
Users of the Site may, at any time, exercise the rights granted to them by Articles 15 et seq. of the GDPR.
In particular, the User may exercise:
- Right of access: you may request information from us regarding the processing we perform on your data or confirmation that we process your personal data. In this case, you may request that we provide you with copies of your data by e-mail and verify any data we may hold.
- Right to rectification: you will be able to rectify your personal data if it is incorrect, including the right to request the supplementation of incomplete data.
- Right to erasure: you may request us to erase the data (or part of the data) you have provided to us.
- Right to limitation: you may request us to limit the processing of your personal data if the legal assumptions apply.
- Right to portability: you will be able to request us to obtain, in a structured, commonly used and machine-readable format, the personal data you have provided to us and to transmit it to another data controller indicated by you.
- Right to object: you may object at any time, for reasons related to your particular situation, to the processing of your personal data, including profiling and, in such case, we will refrain from further processing of your personal data unless our overriding legitimate interests exist. Should you object to processing for any marketing purposes, we may no longer process your data for such purposes.
- Revocation of consent: in all those cases in which the processing finds its legal basis in the User’s consent, the User may revoke it at any time, without prejudice, however, to the lawfulness of the processing carried out before said revocation.
- Right to lodge a complaint with the Guarantor: without prejudice to any other administrative or jurisdictional recourse, the User may lodge a complaint with the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority available at www.garanteprivacy.it.
At any time, you may exercise the above rights by contacting the following e-mail address: privacy@rexilience.eu.
1.9 Changes and updates to the Privacy Policy
This policy is subject to periodic updating. In order to facilitate verification of any changes, the latest update is indicated at the bottom.
Last update: February 8, 2024